Yearn Finance yETH Pool Drained Exploiting Stale Storage Cache
Unvalidated state transitions in the yETH pool's custom stableswap logic allowed an attacker to mint infinite tokens, resulting in a $9M capital drain.
User Wallet Drained via Malicious Token Approval on Goldfinch Ecosystem
Unrevoked contract permissions remain a critical attack vector, enabling malicious actors to drain user-approved assets without direct private key compromise.
Unrevoked Token Approval Exploited Draining Three Hundred Forty Thousand Dollars
Legacy token approvals are critical vulnerabilities; a single unrevoked 2020 permission enabled a $340K wallet drain.
